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(54) Keypad annunciator graphical user interface 

(57) A Keypad Annunciator Graphical User Inter- 
face, (KAGUI), for use by an operator of a process con- 
trol system tor presenting and responding to alarm state 
data generated by the process control system, is dis- 
closed. The KAGUI provides an interactive display of a 
keypad annunciator on a monitor display screen. A pan- 



el manager display and a dynamic icon enhance oper- 
ator awareness, in a multi-window display environment, 
of alarms. The KAGUI synchronizes alarm data present- 
ed by the KAGUI with process control system alarm data 
and informs the operator of the status of interprocess 
communication. 
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Description 

The present invention relates to devices for moni- 
toring and controlling industrial processes, and more 
particularly, to a keypad annunciator graphical user in- s 
terface for presenting process control system alarm da- 
ta, and for providing a flexible and intuitive means by 
which an operator may acknowledge alarms and take 
corrective action. 

Modem industrial processes are becoming increas- 
ingly automated and complex. Such processes, whether 
involving the smelting of steel or the generation of nu- 
clear power, are typically overseen from a centralized 
location by a process engineer or operator, who moni- 
tors data from hundreds, or even thousands, of sensors 
distributed throughout a facility. Sensors measuring 
voltage, current, power consumption, magnetic or elec- 
tric field strength, temperature, pressure, humidity -- the 
list is virtually endless - can be part of a modem process 
control system. Sensor data is used to evaluate the suit- 
ability of raw materials, provide feedback data during 
processing and manufacture, control valves and proc- 
ess flows, ensure the quality of manufactured products, 
and generate alarms. In particular, sensors can be used 
to gather data indicative of an alarm state in an process 
control system. 

When an alarm occurs, considerable demands are 
placed on the process operator, who, confronted with a 
vast array of data from a vast array of sensors, must 
respond quickly and effectively to ensure sate and eco- 
nomical operation of the facility. Optimally, when an 
alarm occurs the operator is immediately alerted. Next, 
the operator ascertains the location, purpose and sig- 
nificance of the sensor. Typically, there are thousands 
of pages of documentation describing the operation of 
the industrial process in question and describing the 
purpose and significance of the various sensors. After 
locating and consulting the appropriate portions of the 
documentation, and perhaps viewing data from other 
sensors, the operator institutes proper corrective action. 
The actual scenario, however, is not always optimal, and 
the operator's job is at times difficult. 

In an earlier era, of simpler, less automated indus- 
trial processes, an annunciator wall panel often in- 
formed operators of alarms. Individual sensors were es- 
sentially hard wired, via relays or other simple circuitry, 
to individual lamps placed at appropriate locations on a 
wall- sized schematic of the process. Sensor data out 
of an acceptable range illuminated a light and sounded 
a horn. However, technological advances, particularly 
the advent of computers, have greatly Increased the 
complexity of most industrial processes, as well as in- 
creased the burden on the operator charged with over- 
sight of the process. In many cases, the old annunciator 
panel wall is obsolete and relatively inflexible. 

Technological advance has also improved the tools 
used by the process operator. Video displays run appli- 
cation programs that can, for example, graph process 



data, display a process graphic (a schematic represen- 
tation of a portion or of all of an industrial process) or 
perform a keyword search through documentation. 
However, not alt the tools are significantly improved: the 
hardware annunciator keyboard (HAK) remains. The 
HAK is composed of a numeric keypad with adjacent 
rows of illuminable lights, and can be described as es- 
sentially a shrunken version of the annunciator wall pan- 
el. An occurrence of a sensor alarm causes a horn to 
sound and illuminates a key associated with that alarm. 
The operator acknowledges the alarm and silences the 
horn by pressing the illuminated key. 

The present HAK does not optimally address the 
needs of an operator charged with overseeing a modern 
and highly automated modem industrial process. The 
existing HAK is bulky, costly to produce, difficult to re- 
configure, and limited to a number of standard key for- 
mats. The HAK warns an operator of all alarms, regard- 
less of severity, in the same manner - the same horn 
sounds, and one of several keys, all typically of the same 
color, illuminates. Adding alarm states to a process con- 
trol system can require multiple hardware annunciator 
keyboards, as keys are not easily added to an existing 
keyboard, further adding to system costs. 

Accordingly, a need exists for a more economical 
and versatile alarm interface that relatively quickly and 
effectively communicates alarm states, facilitates timely 
and proper corrective action, and complements the 
graphical tools for video display already at the operator's 
disposal. 

Embodiments of the invention provide a more ver- 
satile keypad annunciator that allows an operator to 
manage more effectively and efficiently a modern com- 
plex industrial process control system; and 
that more effectively presents alarm data at lower cost. 

The preferred embodiments of the Invention also 
provide an operator-configurable keypad annunciator 
that an operator may readily configure to better ensure 
acknowledgment and appropriate operator response to 
the occurrence of an alarm state. 

The invention is defined in the claims appended 
hereto. However, the following discussion may be of as- 
sistance. 

Embodiments of the invention meet the above 
needs by providing a keypad annunciator graphical user 
Interface for displaying an interactive keypad annuncia- 
tor on a monitor display screen. The keypad annunciator 
display is interactive, i.e., a user may enter commands 
and otherwise direct the process control system by se- 
lecting elements of the keypad display, such as a key, 
with a pointing and selecting input device, such as a 
mouse. The keypad annunciator graphical user inter- 
face, or KAGUI, is also readily configurable by a user 
such that presentation of alarm data and of actions ini- 
tiated by selection of the key may be tailored to better 
manage the process control system. The KAGUI com- 
plements other window-based tools at the operator's 
disposal, allowing use of other windows, yet providing 



IS 



20 



2S 



30 



3S 



40 



45 



50 



EP 0 813 129 A2 



3 

an enhanced ability to alert an operator of an occurrence 
of an alarm state. The term "alarm state," as used here- 
in, refers to a state of the process control system deter- 
mined as a function of system inputs that include sensor 
data A normal alarm state is one in which no alarms are s 
occurring (i.e. , sensor data and other Inputs indicate that 
the process is operating in a nomnal or acceptable man- 
ner). In comparison, when there is a potential problem 
with the process, an alarm is generated in order to quick- 
ly notify the operator, and a particular alarm state is said 
to have occurred. 

According to one aspect of the present invention, a 
key of the KAGUI is associated with an alarm state or 
states of the process control system such that occur- 
rence of the alarm state causes the key to change its 
appearance. Typically, the key changes color and 
blinks. The invention also provides for a system wherein 
the operator chooses a particular key to associate with 
a particular alarm state and defines the alarm states. 

Further aspects of the invention provide for user In- 
teraction. In particular, the system provides an input el- 
ement that is selectable and acknowledges a key in an 
alarm state by selecting the key with a pointing device. 
Selection of a key typically silences the horn and dis- 
plays a process graphic, i.e., a schematic representa- 
tion of the area of the facility where the alarm is occur- 
ring. Such a process graphic can include summary data 
on the sensor or sensors generating the alarm. 

The KAGUI is not likely to be the only application 
using the display monitor of a process control system, 
and at times other windows and GUIs are likely to ob- 
scure the KAGUI. These other windows and GUIs can 
create confusion - a user can open several windows 
simultaneously, perhaps temporarily losing track of oth- 
er important windows. Alarm data are too important to 
be ignored, however, even temporarily. Accordingly, to 
provide the advantages of a KAGUI operating in a mod* 
ern application environment, yet ensure proper presen- 
tation of alarm data, the invention incorporates several 
features. 

According to one feature of the present Invention, 
occurrence of an alarm state associated with a key of a 
particular keypad automatically causes that keypad to 
appear as the topmost window in the display 

According to another feature of the present inven- 
tion, a user may choose an option whereby a keypad 
annunciator floats on top of the display as a high priority 
window, i.e., a window with a priority higher than a ma- 
jority of other windows. 

According to yet another feature, the invention pro- 
vides a dynamic icon, representing a minimized keypad 
annunciator, that changes appearance to indicate oc- 
currence of any alarm state associated with selected 
keys. The icon normally appears in a static state; how- 
ever, upon occurrence of an alarm state associated with 
the selected keys, the icon appears in a dynamic state, 
exhibiting a selected motion. The icon can also simply 
change from one static display state, indicating no 



alarms, to a second static display state, indicating an 
alarm. The icon may be configured to appear on the dis- 
play upon the occurrence of an alarm state, or to float 
on the display as a high priority icon. 

According to yet a further feature of the present in- 
vention, the KAGUI Incorporates an interactive compact 
visual representation of alarm data. This compact visual 
representation or display of alarm state information is 
referred to herein as a panel manager The panel man- 
ager is typically larger than an icon but smaller than a 
full keypad annunciator display 

In one aspect of the present invention, the panel 
managercomprises unique graphical elements, such as 
buttons, that are each associated with a keyboard an- 
nunciator. The graphical element changes visual ap- 
pearance, e.g., changes color and/or blinks, upon oc- 
currence of an alarm state associated with a selected 
key or keys of the particular keypad annunciator repre- 
sented by the button. Selection of the button with a point- 
ing device, such as a pen or mouse, causes the appro- 
priate keypad annunciator to appear on the display As 
usual, the alarm state occurrences are accompanied by 
the sounding of a horn or generation of whatever audible 
stimulus is associated with that alarm state by the oper- 
ator. 

in another aspect of the present invention, the but- 
tons of a panel manager employ a selectable third visual 
state to indicate existence of an alarm state that has 
been acknowledged by an operator 

In a further aspect of the present invention, the pan- 
el manager comes to the front as a topmost window up- 
on the occurrence of an alarm state associated with a 
key on a keypad of which the panel manager is a com- 
pact visual representation. The panel manager may also 
simply be made a display with a higher priority than most 
other windows of the display Because of its compact 
size, placing the panel manager at the forefront of the 
display does not unduly interfere with the operator's 
working with other windows. 

The foregoing aspect of the invention regarding 
presentation of alarm states, particularly the dynamic 
icon and the panel manager, allows an operator to fully 
employ a multi-window, multi-application control work- 
station yet be highly assured of timely and effective com- 
munication of the occurrence of an alarm state. 

The keyboard annunciator graphical user interface 
communicates to an operator the alarm status of a proc- 
ess control system. A typical industrial process control 
system is highly distributed and typically uses computer 
processors of different manufacture, often running dif- 
ferent operating systems, located at a distance from 
each other. Communication between computers is often 
over a network. Interprocess communication (IPC) is 
therefore the lifeblood of the modern and highly auto- 
mated process control system. Sensors can communi- 
cate with processors, processors can communicate with 
each other, and many of the foregoing can communicate 
with the control workstation. Network communication. 
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however, is not always reliable, and alarm data trans- 
mission to the KAGUl can be interrupted. Nevertheless, 
the KAGUl should accurately represent at all times the 
alarm state of the process control system. 

In a healthy industrial process, alarm states do not 5 
regularly occur and the commun ication means for trans- 
mitting alarm data are not constantly In use and thus are 
not constantly tested. Accordingly, the invention pro- 
vides apparatus and methods to maximize probability 
that the alarm state of the process control system rep- 
resented by the keyboard annunciator graphical user in- 
terface is correct. 

According to one feature of the present invention, 
"verification' messages are constantly transmitted over 
a communication path to verify its continued existence. 
Acknowledgment signals are sent by a receiver of an 
IPC message to the sender. Under normal conditions, 
that is, when the communication path is functional prop- 
erly and open, constantly sending verification signals re- 
sults in constantly receiving acknowledgment signals, 
which confirm the continued existence of the path. The 
process operator is typically informed of the status of 
the communication path by a display element of the 
KAGUl. The display element typically has two visual 
states, one to indicate successful transmission of veri- 
fication signals and another to indicate unsuccessful 
transmission of verification signals, and hence a break 
in the communication channel. Note that the content of 
the verification message is typically Irrelevant. It is the 
sending of the messages on a regular basis that serves 
to verify the continued existence of the IPC path. 

According to another aspect of the present inven- 
tion, means are provided, such as a selectable button 
on a toolbar, for an operator to resynchronize the alarm 
state information possessed and displayed by a key- 
board annunciator graphical user interface with that of 
the process control system. Resynchronization refers to 
a download of alarm state information from a process 
control system to a KAG Ul to refresh the data presented 
by the KAGUl so that the KAGUl represents, as accu- 
rately as possible, the alarm state of the process control 
system. 

In yet a further aspect of the present invention, the 
KAGUl automatically maintains synchronization of 
alarm data by, upon detecting a failed transmission "ver- 
ification signal," reestablishing the communication path, 
such as a pipe, between the KAGUl and the process 
control system and retransmitting all alarm state infor- 
mation from the process control system to the KAGUl. 

In an additional aspect of the present invention, a 
serwer process is established to route alarm state data 
from a state table maintained by a process control sys- 
tem to a client process operative with the KAGUl. Such 
a server process can sen/e multiple clients. 

The KAGUl can be configured in many ways to en- 
hance presentation of, and response to, alarm state in- 
formation. Configuration options useful to an operator 
are therefore briefly outlined. 



6 

According to another aspect of the present inven- 
tion, the KAGUl appears on a monitor as a traditional 
hardware keyboard annunciator. A numeric keypad is 
situated adjacent rows of alarm keys. 

In an additional aspect of the present invention, the 
layout of the keys, that is, the number of rows and col- 
umns, as well as the overall number of keys of the key- 
pad annunciator are selectable. Multiple keypad annun- 
ciators are also possible. Multiple lines of label Informa- 
tion are displayable on the surface of each of the keys 
of the keypad annunciator. Furthermore, the visual ap- 
pearance of a key for indicating non-occurrence of a 
alarm state, occurrence of an alarm state, and an ac- 
knowledged alarm are selectable. Typically, a key not in 
alarm appears as a first solid color; a key in alarm ap- 
pears as a second color and blinking; and a key Indicat- 
ing an acknowledged alarm appears in the second color 
but does not blink. 

An audible stimulus typically alerts the operator to 
a key in an alarm state. However, ail alarm states are 
not created equal; some may involve potential injury to 
personnel while others may indicate a simple and rela- 
tively easily correctable "glitch" in the industrial process. 
Accordingly, the invention allows an operator to select 
a unique sound to indicate priority of an alarm. 

Embodiments of the Invention will now be described 
by way of example, with reference to the accompanying 
drawings, in which; 

FIGURE 1 is a schematic illustration of a typical 
process control system; 

FIGURE 2 illustrates selected software and hard- 
ware components of process control system includ- 
ing a keypad annunciator graphical user interface; 
FIGURE 3 is a typical process graphic, displayable 
on a workstation monitor, of a process of a process 
control system; 

FIGURE 4 illustrates a keypad annunciator graphi- 
cal user interface and a process graphic displayed 
alongside each other on a workstation monitor dis- 
play; 

FIGURES SAand 5B Illustrate user-configured key- 
pad annunciators of a keypad annunciator graphi- 
cal user interface; 

FIGURE 6 shows a typical panel manager display 
component of the keypad annunciator graphical us- 
er Interface; 

FIGURE 7 illustrates the panel manager displayed 
alongside a process graphic on a workstation dis- 
play monitor; 

FIGURES 8A and 8B show a dynamic icon for dis- 
playing a minimized panel manager component of 
a keypad annunciator graphical user interface; 
FIGURE 9 illustrates a property page for configuring 
the major display options of the keypad annunciator 
graphical user interface; 

FIGURE 10 is a flow chart illustrating run-time de- 
cisions made by the keypad annunciator graphical 
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user interface for displaying alarm state informa- 
tion; and 

FIGURE 11 Is another flow chart of the run time be- 
havior of the keypad annunciator graphical user in- 
terface, illustrating the maintenance of interprocess s 
communication paths used for transmission of 
alarm data, including automatic synchronization of 
process control system alarm data and alarm state 
information presented by a keypad annunciator 
graphical user interface. 

FIGURE 1 schematically illustrates the major com- 
ponents of a nx>dern process control system 1 . Proces- 
sors, such as processor 2, are typically located through- 
out an industrial facility and sen/e to process data from 
sensors, such assensor6, and to operate controls, such 
as control 8. Sensor 6 provides feedback to processor 
2 such that programs or algorithms running on the proc- 
essor 2 can properly operate control 8. For example, 
sensor 2 could be a temperature sensor for measuring 
the temperature of a process flow and control 6 could 
be a valve for controlling the flow. Processor 2 also cal- 
culates alarm states based on data from sensor 6, and 
perhaps from other sensors as well. 

Processor 2 can be a complete computer, including 
a central processing unit, random access memory, read 
only memory, a hard drive and input-output hardware. 
A monitor is usually not part of processor 2, nor is a key- 
board typically attached. Several different processors 
may be part of the overall process control system 1 , and 
different operating systems such as UNIX, SUN OS or 
Windows NT, running on different machines, can be part 
of an overall process control system. Processor 2 com- 
municates with sensor 6 and with control 8, and with the 
central control and monitoring workstation 12, over in- 
terprocess communication (IPC) paths 4 and 10. 

An operator uses workstation 12 to monitor and 
control the Industrial process. Workstation 12 typically 
comprises input-output hardware 14, a central proces- 
sor 16, random access memory 18, disk storage 20, a 
hardware annunciator keyboard (HAK) 22, pointing de- 
vice, such as mouse 24 and a display monitor 26. A reg- 
ular keyboard {not shown) for the entry of text is typically 
also Included. The invention replaces HAK 22 with a 
keypad annunciator graphical user interface (KAGUI). 
The KAGUI is displayed on video screen 26. 

In a simple process control system, individual proc- 
essors, such as processor 2, are not used, and work- 
station 12 operates controls, such as control 8, commu- 
nicates with sensors, such as sensor 6, and runs the 
computational tasks associated with the process control 
system 1 , including the KAGUI. 

FIGURE 2 illustrates several software components 
important to the Invention. Alarm alert task 30, alarm 
server task 42, and display managers 46 are part of a 
typical process control system. Server task 34 and client 
task 38 work closely with the KAGUI. Communication 
between tasks, and between tasks and hardware com- 
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ponents such as hardware annunciator keyboard 50 
and workstation monitor 26, is accomplished via IPC 
mechanisms. For example, alarm alert task 30 commu- 
nicates with the sender task 34 using IPC path 32. Inter- 
process communication is important to the present in- 
vention and to a process control system, and techniques 
regarding IPC are subsequently discussed. Display 
managers 46 display various process graphics and oth- 
er Information on monitor 26. The KAGUI may call these 
various process graphics and system information to be 
displayed on the monitor 26. Pointing device 24, such 
as a mouse, is used to select keys in the KAGUI or other 
graphical elements of the KAGUI, and to othenA/ise pro- 
vide input to the process control system. 

Alarm alert task 30 maintains a state table of all 
alarm information generated by the process control sys- 
tem. Alarm sender task 42 processes commands to be 
executed by the process control system. Some of these 
commands originate with the KAGUI, others originate 
from process control interactive displays that appear on 
display monitor 26. Alarm alert task 30 communicates 
over IPC path 32 to inform sen/er task 34 whenever a 
change occurs in the alarm state of the process control 
system (e.g., a sensor indicates an alarm, or a sensor 
in alarm returns to normal) The server then communi- 
cates this change to the client task 38, and the presen- 
tation of alarm data by the KAGUI is updated. 

Occurrence of an alarm is generally accompanied 
by the sounding of a horn, or the generation of whatever 
audible stimulus the user has selected for that alarm. 
Hardware annunciator keyboard 50 is included in FIG- 
URE 2 to illustrate that, if desired, it can be used in ad- 
dition to the KAGUI. 

- A graphical user Interface (GUI) is a powerful, inter- 
active display format that enables a user to operate a 
computer by pointing to and selecting pictorial represen- 
tations on a screen. The modern GUI is a considerable 
improvement over the text-based entry operating sys- 
tems of just a few years ago, which required a user to 
remember several cryptic commands just to make a 
computer perform a simple task. A typical process con- 
trol system has its own GUI that displays, for example, 
process graphics. The KAGUI of the present invention 
can be Implemented by providing keypad annunciator 
functionality through the GUI interface of the process 
control system. 

FIGURE 3 illustrates a typical process graphic 56, 
displayed on monitor 26, of a process for manufacturing 
coke. FIGURE 4 illustrates the KAGUI Implementation 
of a traditional hardware annunciator keyboard (HAK) 
60 displayed with a processing control system process 
graphic 58. Process graphic 58 appears in the upper 
portion of FIGURE 4. The KAGUI implementation of the 
hardware annunciator keyboard 60 appears in the lower 
portion of FIGURE 4. The KAGUI implementation of the 
hardware annunciator keyboard 60, referred to herein 
as a "soft HAK", is composed of a numeric entry keypad 
64 and two alarm button panels 66 and 68, respectively 
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Also included is button 70, for silencing an alarm horn. 
Panels 66 and 68 are composed of individual keys. 
There are sixteen keys per panel arranged in four col- 
umns and four rows of keys per panel. In the soft HAK 
illustrated in FIGURE 4, not all the keys are associated s 
with an alarm state. Each key associated with an alarm 
state, however, has a label displayed on the key, such 
as on key 72. A pointing device, such as a mouse, is 
used by the operator to select keys. Operator input via 
a light pen, or a touch screen, is also well-known in the 
art. 

The KAGUI of the present invention allows an op- 
eratorto readily configure the layout of a keypad annun- 
ciator. The operator may customize the keypad annun- 
ciator to better present alarm data or to better allow con- 
trol of the process control system. FIGURE 5 illustrates 
two examples of customized keypad annunciators. In 
FIGURE 5A, keypad annunciator 72 has three panels 
of keys (panels 74, 76 and 78). The operator has chosen 
to eliminate the numerk^al keypad 70 of the soft HAK 
illustrated in FIGURE 4. The use of three panels of alarm 
keys accommodates additional alarm states. FIGURE 
5B illustrates another customized keypad annunciator. 
In keypad annunciator 60, there is only one panel of 
eight keys. The silence horn button 70, included in key- 
pad annunciators 72 and 60, is not included in keypad 
annunciator 80. The KAGUI does not limit the operator 
to one keypad annunciator only; the operator can con- 
figure the KAGUI to support multiple keypad annucia- 
tors. Keypad annunciator 72 of FIGURE 5A and keypad 
annunciator 80 of FIGURE 5B are both readily incorpo- 
rated by the KAGUI. This is an advantage of the inven- 
tion over the prior HAK; incorporation of another key- 
board would have required another physical bulky HAK. 

Other operator-configurable KAGUI keypads in- 
clude: a keypad annunciator with 48 buttons arranged 
in twelve columns and four rows; a keypad annunciator 
including a numeric keypad, and with thirty-two alarm 
keys arranged in eight columns and four rows; a keypad 
annunciator with forty-eight keys arranged in six col- 
umns and eight rows; and a keypad annunciator with 
one to three panels of keys and with up to sixteen keys 
on each panel. 

Based on the disclosures herein, one of ordinary 
skill in the art can design a configurator appropriate for 
configuring the KAGUI. Such a configurator can be pre- 
dominantly "hard-coded, " such that most display and 
other options are fixed, or can provide configuration op- 
tions that an operator can readily select using, for ex- 
ample, dialog boxes. 

Typically, the appearance of a key for indicating no 
alarm, the occurrence of an alarm and an acknowledged 
alarm can be configured. Typically a key not Indicating 
an alarm appears in a solid color; a key indicating an 
alarm appears both in a second color and blinking; and 
a key indicating an alamn that has been acknowledged 
by the operator appears in the second color and not 
blinking. The operator may choose the colors he or she 



desires for each key and each state. Also configurable 
are: The alarm state or states of the process control sys- 
tem to associate with each key; an audible stimulus to 
be generated when a key is in alarm; actions to be ini- 
tiated by selecting a key, including, for example, running 
a program, displaying a process graphic or silencing the 
audible stimulus; and other display options for the 
KAGUI, including display of panel manager and dynam- 
ic icon, both to be subsequently discussed. Advanced 
configuration options are also provided, such as a drag- 
and-drop key configuration and auto block extract from 
existing display files. The operator selects a pre-config- 
ured display file using the file manager and drops the 
file onto the desired keypad annunciator key. The key is 
assigned to the display file and all the blocks used in the 
display are automatically included in the block list for 
that key. Additionally, the configurator exports and im- 
ports the comma separated variable (CSV) format, al- 
lowing configuration using third-party toots, such as 
spread sheets or databases. 

The KAGUI presents alarm data to an operator and 
allows an operator to respond to the occurrence of an 
alarm state by selecting the appropriate keys. However, 
the operator will not always display a key pad annunci- 
ator as a topmost window on the monitor. It is critical, 
however, that alarm data be presented and responded 
to in a timely manner. Accordingly, the invention Incor- 
porates several features to enhance operator aware- 
ness of alarms. One feature is a compact visual repre- 
sentation of the key pad annunciator, or annunciators, 
for which the KAGUI is configured. The compact visual 
representation, referred to herein as a panel manager, 
is illustrated in FIGURE 6. 

Panel manager 81 in FIGURE 6 includes graphical 
elements, or buttons, for each keypad annunciator to 
which it is responsive. Panel manager thus represents 
four keypad annunciators and has four buttons: General 
overview button 82, boiler oven/iew button 84, tank 
overview button 86 and boiler display button 88. Occur- 
rence of an alarm state associated with a key of a given 
keypad annunciator causes the appropriate button, re- 
sponsive to that keypad annunciator, to illuminate. Se- 
lecting the illuminated button with the pointing device 
causes the keypad annunciator to appear as a high pri- 
ority window on the monitor. The user then deals as nec- 
essary with the alarm. 

The operator may configure panel manager 81. 
Typically a solid button color indicates no alarm, a sec- 
ond blinking color indicates an alarm, and a second, sol- 
id color lndk:ates an acknowledged alarm The panel 
manager 81 is typically larger than an icon but smaller 
than a keypad annunciator, however its exact size rela- 
tive to a keypad annunciator depends on the number of 
keypad annunciators that the panel manager 81 man- 
ages. The panel manager is configurable to float on top 
of the desk top as a high priority window or appear on 
the display the occurrence of an alarm state associated 
with keys of selected keypad annunciators. FIG. 7 illus- 
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trates a process graphic for a centrifuge 92 over which 
the panel manager 81 floats. 

Should the operator desire to fully minimize the 
KAGUI, the invention provides a dynamic icon 95. The 
icon can be configured to float on the desk top as a dis- s 
play with a priority higher than most, or all, windows, or 
to display upon occurrence of an alarm state. The icon 
95 indicates alarms by dynamically changing its appear- 
ance. Dynamic icon 95 Is illustrated in FIGURE 8A and 
SB. Upon occurrence of selected alarm state, the icon 
appears as continually changing from icon state 94 to 
icon state 96; othenA/ise, the icon is static, and can ap- 
pear as in FIGURE 5A or as in FIGURE 5B. 

The invention thus provides an operator with a wide 
range of display options. 

FIGURE 9 illustrates dialog 97 for selecting run time 
display options of the KAGUI. Option boxes 98 and 102 
are for selection of display options for the panel manag- 
er and keypad annunciators, respectively In panel man- 
ager option box 98, option button 100 and check boxes 
104 and 106 are selected. Upon the occurrence of an 
alarm state, the panel manager, if obscured by other 
windows, is brought to the front of the display. If the pan- 
el manager 81 is minimized, the dynamic icon is brought 
to the front of the display. In option box 102, option but- 
ton 110 is selected, therefore, the keyboard annuncia- 
tors do not float on the display as high priority windows 
and do not appear upon occurrence of an alarm state. 

Note that the operator may choose to eliminate all 
visual cues to the occurrence of an alarm by choosing 
option button 108 in panel manager option box 98 and 
option button 110 in option box 102. In this case an op- 
erator is relying on the horn or other configured audible 
stimulus to warn him of an occurrence of an alarm. Note 
that selecting option button 112, "float on top," in panel 
manager box 98 and option box 110, "do nothing," in 
option box 102, float the panel manager on the top of 
the display, and minimizing the panel manager 81 brings 
the icon 94 up as a floating display. 

FIGURE 10 illustrates a flow chart for the runtime 
behavior of the KAGUI in alerting the operator to the oc- 
currence of an alarm state, based on options selected 
in dialog 97. Normally the KAGUI continually tests for 
the occurrence of alarm states, as in 116. If no alarm 
states are occurring, the KAGUI periodically tests the 
communication path, as indicated by box 118. Box 118 
will be elaborated on subsequently. Upon occurrence of 
an alarm state, the KAGUI generates the audible stim- 
ulus selected for that alarm state, as indicated in box 
120. Although not recommended, an operator can elim- 
inate all visual and audible stimuli. Typk:ally the operator 
will be alerted to the occurrence of an alarm state by 
both audible and visual stimuli. 

From box 1 20 the KAGUI proceeds to decision box 
122, and determines whether the keypad annunciator 
containing the key in an alami state is displayed. If the 
keypad annunciator is displayed, the key is illuminated 
in the selected manner. If the keypad annunciator Is not 
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displayed, the KAGUI proceeds to decision box 126. If 
the keypad annunciator is configured to come to the 
front of the display as a high priority window on alarm, 
the keyboard annunciator is displayed, as indicated by 
box 128, and the key is displayed in the selected manner 
as In box 124. If the key pad annunciator is not config- 
ured to appear on alarm, the KAGUI proceeds from de- 
cision box 1 26 to box 129, and as indicated by that box, 
option box 110 in key pad annunciator option box 102 
of FIG. 9 has selected, and the KAGUI "does nothing" 
with the keypad annunciator displays. Both box 1 29, "do 
nothing" and box 124 "display key pad annunciator in 
selected manner" bring the KAGUI to decision box 1 30. 

If the panel manager 81 is selected as floating, the 
KAGUI proceeds along the "yes" branch to decision box 
132. From box 132, if the panel manager is minimized, 
the KAGUI proceeds from box 132 to box 134 and the 
Icon dynamic behavior is shown. If the panel manager 
81 is not minimized the KAGUI proceeds from box 132 
to box 1 36 and the appropriate button, for example, but- 
ton 84 of panel manager 81 is displayed in the selected 
manner. Both box 134, "show dynamic icon behavior," 
and box 136, "display the panel manager button in se- 
lected manner," lead the KAGUI to box 150, where the 
KAGUI awaits operator input. 

Returning to decision box 1 30, if panel manager 81 
is not selected as floating, the KAGUI proceeds instead 
along the 'no" branch to decision box 138. If the panel 
manager 81 is configured in dialog 97 to appear, the 
KAGUI proceeds along the "yes" path from box 138 to 
decision box 140. From 140, if the panel manager is not 
minimized, the KAGUI proceeds to box 142, displays the 
panel manager and then proceeds to box 1 36 and dis- 
plays the appropriate button of panel manager 81 and 
then proceeds to box 150, "respond to operator input." 
If box 140 decides that the panel manager is minimized, 
the KAGUI proceeds to decision box 144, and deter- 
mines whether the panel manager is selected to appear 
when minimized, that is, it determines whether option 
button 1 00 on property page 97 is selected and whether 
check box 106 is checked. If the answer is yes to both, 
the KAGUI proceeds to box 146, "display icon," then to 
box 1 34, "show icon dynamic behavior," and then to 1 50, 
"respond to operator input." OthenA/ise, following the 
"no" branch decision box 138, the KAGUI proceeds to 
box 148, and then to box 150, "respond to operator in- 
put". Note that the operator may configure the display, 
such that no visual stimuli are produced on an occur- 
rence of an alarm. 

Described in FIGURE 10 is a particular flow chart 
for a KAGUI to follow in producing visual stimuli. It will 
be apparent to those of ordinary skill in the art that se- 
quences of steps and decisions in FIGURE 10 are only 
examples; there can be variations to those steps and 
sequences illustrated in FIGURE 10, including, for ex- 
ample, following more or less than all the steps of FIG- 
URE 10, modifying one or more of the steps, or changing 
the order of some or all steps, without departing from 
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the spirit or scope of the invention. These variations are 
therefore considered a part of the present invention. 

The KAGUI alerts the operator to the occurrence of 
selected alarm states of the process control system and 
enhances the operator's ability to respond. However, for s 
the KAGUI to be effective it must accurately represent 
the alarm state of the process control system. Individual 
computers or processors, and processes running on 
computers, communicate by way of IPC paths. Refer- 
ring to FIGURE 2. the alarm alert task 30 communicates 
with server task 34 over IPC path 32, and sen/er task 
34 communicates with the client task 38 over IPC path 
36. The alarm alert task 30 maintains a state table of all 
alarm data generated by the process control system, 
and typically is a computational process running work 
station 12. If any entry in the state table changes, for 
example, because of an alarm being generated, the 
alarm alert task communicates this change in alarm 
state over I PC path 32 to server task 34. Server task 34 
in turn routes this change in alarm state to client task 38 
by communicating over IPC path 36. The alarm state is 
then displayable by the KAGUI. 

The goal of the process operator is a healthy run- 
ning industrial process in which alarm states are not of- 
ten generated. In practice, IPC paths 32 and 36 may not 
be used regularly, and therefore are not frequently test- 
ed. However, it is imperative that when a change in 
alarm state does occur, the IPC paths 32 and 36 are 
capable of transmitting this change in alarm state. 

Several types of IPC paths, including pipes and 
sockets, are well known to those skilled in the art. In 
addition, a given process control system may use a pro- 
prietary type of IPC path. IPC paths can further be cat- 
egorized as connectionless and connection-oriented. In 
connectionless IPC path, the sending of data in one di- 
rection on a path, for example, from alarm alert task 30 
to server task 34 over IPC path 32, causes an acknowl- 
edgment to be sent from server task 34 back to alarm 
alert task 30. In response to that first acknowledgment 
a second acknowledgment is sent from alarm alert task 
30tobacktosen/ertask34. The acknowledgment, how- 
ever, does not usually contain information that identifies 
the data packet being acknowledged. A connection ori- 
ented IPC path is a little more sophisticated. If, for ex- 
ample, server task 34 communicates with client task 38 
over a connection oriented IPC path 36, each data pack- 
et traveling from sen/er task 34 to client task 38 gener- 
ates an acknowledgment packet from client task 38 to 
server task 34. The acknowledgment packet contains a 
data sequence that identifies which data packet is being 
acknowledged. If sen/er task were to send data and no 
acknowledgment is received by the server task within a 
specified time, the server task automatically resends the 
data packet over the IPC path 36. 

Connectionless IPC paths are often suitable when 
two processes that are communicating are both running 
on the same machine or computer. The more sophisti- 
cated connection oriented path is used when two proc- 
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esses running on different machines communicate over 
a network connection, as network connections may not 
be as reliable as interprocess communication on the 
same processor. 

The preferred embodiment of the invention employs 
connection oriented IPC paths and include further fea- 
tures to maximize the probability that the alarm state in- 
formation displayable by the KAGUI is accurate and to 
inform an operator of the status of IPC paths 32 and 36 
used to communicate alarm state information. 

According to this feature, the Invention maintains 
IPC paths used for the transmission of alamri data by 
continually sending verification messages over the IPC 
paths. The content of these verification signals is typi- 
cally irrelevant; their purpose is to generate acknowl- 
edgment signals from the receiver of the verification 
message. The entities at each end of a given IPC path 
both transmit verification signals to verify the continued 
existence of the path, and, should the path fail to func- 
tion, i.e., should a failure to receive acknowledgment 
signals be detected, they cooperate in reestablishing an 
IPC path. For example, sen/er task 34 in FIGURE 2 con- 
stantly sends verification signals over IPC path 36 to re- 
ceive a constant stream of acknowledgment signals 
from client task 38. Client task 38 sends a constant 
stream of verification signals over path 36 to receive a 
steady stream of acknowledgment signals from server 
task 34. If the path 36 fails, the sen/er task 34, upon 
detecting a failure to receive acknowledgment signal, 
usually by waiting for a selected period of time after 
sending verification messages, goes into listening 
mode. The client task 38, similarly detecting a failure of 
the communication path 36, goes into an attach mode. 
Together, the server 34 and client 38 re-establish a new 
communication path 36, 

The operator is alerted to the status of communica- 
tion path 36 by a graphical element that is part of panel 
manager 81 . Referring to FIGURE 6, graphical element 
90, in the illustrated embodiment a tool button, simulates 
an LED. Toolbutton 90 blinks green as long as all IPC 
path being verified are open and functioning, that is, as 
long as regular acknowledgment signals are received. 
Should a failure of an IPC path be detected, the tool but- 
ton 90 blinks red to alert an operator that the alarm state 
information presented by the KAGUI might not be accu- 
rate. 

The invention also includes an automatic synchro- 
nization procedure for maximizing the probability that 
the KAGUI displays the proper alarm state condition. 
This synchronization technique is discussed in conjunc- 
tion with FIGURE 11 , which also illustrates the run time 
behavior of the KAGUI. Referring to FIGURE 11, the 
KAGUI continually checks for the occurrence of alarm 
states and awaits operator input, and Indicated by boxes 
115 and 116. Should an alarm state be generated, the 
KAGUI proceeds to box 1 20 and generates the selected 
audible stimulus. Proceeding to decision box 152, if the 
KAGUI is configured for visual stimulus, the KAGUI dis- 
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plays the selected visual stimulus as indicated by box 
154. The KAGUI then responds to operator Input as in- 
dicated by box 156. If the KAGUI is not configured for 
the display of visual stinnuli, it proceeds directly from box 
152 to box 156. In either case, the KAGUI responds to 
operator input until the problem is fixed, as illustrated by 
decision box 158. 

if the test for the occurrence of an alarm state in 
decision box 116 indicates that no alarms states have 
changed, the KAGUI automatically proceeds to box 118 
and tests communication paths. Verification signals are 
continually sent over important I PC paths. Should all ac- 
knowledgments be received, as indicated by the yes 
branch of decision box 160, the KAGUI simply returns 
to its normal state, as in decision boxes 115 and 116, of 
responding to operator input and continually testing for 
the occurrence of an alarm state. Should a failure to re- 
ceive acknowledgment messages be detected by any 
sender, the KAGUI proceeds to box 162 and alerts the 
operator, typically by changing toolbutton 96 from green 
to red. After alerting the operator, the KAGUI reestab- 
lishes the pipe or socket or other proprietary communi- 
cation path between, for example, sender task 34 and 
client task 38, as Indicated by box 164. Once the IPG 
path is re-established, the KAGUI resynchronlzes the 
alarm data presented by the KAGUI with current alarm 
data by downloading, as indicated in box 166, all alarm 
state data from alarm task 30 to client task 38, which is 
associated with the KAGUI. The KAGUI alarm data is 
thus refreshed. Should server task 34 and client task 
initially fail to establish a communication path, they con- 
tinue to try until a path is established. The KAGUI then 
proceeds to box 168, and the operator is informed, by 
panel manager toolbutton changing back to a simulated 
green LED, that IPC communication paths are now op- 
erational. The KAGUI then returns to its normal state of 
responding to operator input and continually testing for 
an alarm state, as indicated by boxes 1 1 5 and 1 1 6. Note 
that synchronization need not be automatic; the opera- 
tor could be relied upon to manually download data. 

It is expected that one of ordinary skill in the relevant 
arts, possessed of the teachings herein, can create a 
KAGUI for use with a process control system using an 
object oriented approach in a computer language such 
as C-H-. Implementation of the KAGUI described herein 
relied heavily on published class libraries such as the 
Microsoft Foundation Class library. However, the visual 
basic computer language should also allow design of a 
key pad annunciator graphical user interface quite sim- 
ilar to that disclosed herein. 

The Invention thus provides a keypad annunciator 
graphical user interface (KAGUI) for presenting an in- 
teractive keypad annunciator on a monitor display. 
Alarm state data are presented, and an operator can re- 
spond by selecting elements of the keypad display, such 
as a key, with a pointing and selecting Input device. Key- 
pad annunciators can be readily configured to allow ef- 
ficient and effective management of the process control 



system. The KAGUI includes a panel manager and a 
dynamic Icon to enhance operator awareness, in a mul- 
ti-window display environment, of alarms. Many display 
options for keypad annunciators, the panel manager, 

5 and the icon are available. The KAGUI synchronizes 
alarm data presented by the KAGUI with process control 
system alarm data and Infonns the operator of the status 
of interprocess communication paths. 

It will thus be seen that the invention efficiently ob- 

10 tains objects set forth above among those made appar- 
ent from the preceding description. Because certain 
changes may be made In the above constructions with- 
out departing from the scope of the invention, it is in- 
tended that all matter contained in the above description 

IS and shown in the accompanied drawings be interpreted 
as illustrative and not an limiting sense. 

It is also to be understood that the folbwing claims 
are Intended to cover generic and specific features of 
the invention described herein and all statements of the 

20 scope of the invention which as a matter of language 
might be said to fall therebetween. 



Claims 

2S 

1. A process control system, including at least one 
sensor for determining the state of at least one proc- 
ess variable, a processor means for generating 
alarm state data when the variable Is in a predeter- 
30 mined state, and a display monitor, 



comprising display means for displaying on the 
display monitor at least one keypad annuncia- 
tor having at least one key displayable in at 

35 least two key display states, said display means 

displaying said one key normally In a first key 
display state and being responsive to alarm 
state data for displaying one key In a second of 
the at least two key display states upon occur- 

40 rence of a selected alarm state, and 

input means operative with said display means 
for changing a display, on the monitor, associ- 
ated with the keypad annunciator, and for re- 
sponding to the occurrence of the alarm state. 

45 

2. A process control system according to Claim 1 , fur- 
ther comprising 

panel manager means for displaying, In an area 
so normally occupying a portion of the display 

screen of the display monitor, a panel manager 
for visually representing a selected condition of 
alarm state data associated with a keypad an- 
nunciator, and 

ss input means operating with said panel manager 

means for changing a display, on the display 
monitor, associated with said panel manager. 
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A process control system according to Claim 2 fur- 
ther wherein 

said panel manager includes floating panel 
manager means responsible to a user input for dis- 
playing said panel manager on the monitor display s 
such that the display of said panel manager has a 
priority higher than a majority of other windows. 

A process control system according to Claim 2 fur- 
ther comprising io 

dynamic icon means for displaying on said 
display monitor a dynamic icon, having at least two 
dynamic icon display states, said dynamic icon dis- 
play means displaying said dynamic icon normally 
In a first dynamic icon display state and being re- is 
sponsible to selected alarm states of the process 
control system, for displaying said dynamic icon In 
a second dynamic icon display state, said dynamic 
icon means responsive to the selection of said dy- 
namic icon by way of said input means for display- 20 
ing the panel manager on the display in response 
to a selected input. 

A process control system according to Claim 1 fur- 
ther comprising 25 

panel manager means for displaying a panel 
manager in an area normally occupying a por- 
tion of the display screen of the display monitor, 
said panel manager means being responsive 30 
to at least one selected alarm state and being 
associated with at least one keypad annuncia- 
tor, said panel manager having at least two 
unique display states for each keypad annun- 
ciator with which said panel manager is asso- 3S 
dated, said panel manager, responsible to the 
occurrence of an alarm state that is associated 
with said at least one keypad annunciator with 
which said panel is associated, displaying said 
panel manager In the second panel manager 40 
display state associated with that keypad an- 
nunciator, and 

dynamic icon means for displaying on said dis- 
play monitor a dynamic icon, having at least two 
dynamic icon display states, said dynamic icon 4S 
display means displaying said dynamic icon 
normally in a first dynamic icon display state 
and being responsive to selected alarm states 
of the process control system, for displaying 
said dynamic icon in a second dynamic icon so 
display state, said dynamic Icon means respon- 
sive to the selection of said dynamic icon by 
way of said input means for displaying the panel 
manager on the display in response to a select- 
ed input. ss 

A method of reporting the occurrence of an alarm 
state within a process control system, comprising 



the steps of 

displaying at least one keypad annunciator on 
a display monitor, 

displaying at least one key of the keypad an- 
nunciator normally in a first key display state, 
displaying the at least one key in a second dis- 
play state upon occurrence of a selected alarm 
state, and 

changing a display, on the display monitor, as- 
sociated with the keypad annunciator, and re- 
sponding to the occurrence of the alarm state 
in response to an input device. 

7. A reporting method according to Claim 6, further in- 
cluding 

displaying a panel manager in an area normally 
occupying a portion of the display screen of the 
display monitor, 

associating the panel manager with at least one 
keypad annunciator, 

providing the panel manager with at least two 
unique display states for each keypad annun- 
ciator with which the panel manager Is associ- 
ated, and 

displaying the panel manager in a second panel 
manager display state associated with a key- 
pad annunciator upon occurrence of an alarm 
state associated with a key of that keypad an- 
nunciator. 

8. A reporting method according to Claim 7, further in- 
cluding 

displaying said panel manager on the monitor 
display as a display having a priority higher than a 
majority of other windows upon the occurrence of 
at least one selected alarm state. 

9. A reporting method according to Claim 7, further in- 
cluding 

displaying on said display monitor a dynamk: 
icon, 

displaying said dynamic icon nomnally in a first 
dynamic icon display state, 
displaying said dynamic icon in a second dy- 
namic k;on display state in response to the oc- 
currence to selected alarm states, and 
displaying the panel manager on the display in 
response to a selected input by way of selecting 
the dynamic icon with the input device. 

10. A reporting method according to Claim 9, further in- 
cluding 

displaying said dynamic icon as a display hav- 
ing a priority higher than a majority of other windows 
on the display monitor in response to the occur- 
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rence of at least one selected alarm state. 

11. Apparatus for maintaining synchronization between 
first data representative of a process control system 
and second presentation data response to the first 
data, comprising 

means for transmitting a succession of verifica- 
tion signals between a computational task of 
the process control system and a keypad an- 
nunciator graphical user interface of the proc- 
ess control system, 

means for receiving, under normal conditions, 
acknowledgement signals in response to suc- 
cessful transmissron for verifying the continued 
existence of a communication path therebe- 
tween, 

means for maintaining the communication 
path, including 

detecting means for detecting a failure to re- 
ceive the acknowledgement signals, 
establishment means for responding to a de- 
tected failure to receive the acknowledgement 
signals by re-establishing a communication 
path between the computational task and the 
keypad annunciator graphical user interface, 
and 

refresh means for transmitting current alarm 
values of the first data from the computational 
task to the keypad annunciator graphical user 
interface to refresh the second presentation da- 
ta, said refresh means transmitting the current 
alarm values using the re-established commu- 
nication path. 

12. A method for maintaining synchronization between 
first alarm data of a process control system and the 
presentation thereof by a keypad annunciator 
graphical user interface, comprising the steps of 

transmitting a succession of verification signals 
on a communicatbn path used for the transmis- 
sion of process control system alarm data, and 
receiving, under normal conditions, acknowl- 
edgement signals In response to successful 
transmission of the verification signals for ver- 
ifying the continued existence of the communi- 
cation path, 

maintaining said communication path, includ- 
ing detecting a failure to receive said acknowl- 
edgement signals, and in response to a failure 
to receive acknowledgement signals, re-estab- 
lishing a communication path, and 
transmitting current first alarm data of the proc- 
ess control system to the keypad annunciator 
graphical user interface, using the re-estab- 
lished communication path, in response to the 
re-establishment of the communication path. 
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13. A method according to Claim 12 further including 
the steps of providing, at the keypad annunciator 
graphical user interface, a first indicatbn in re- 
sponse to verifying the existence of the communi- 
cation for transmission of alarm data, and including 
the step of changing said first indication in response 
to a failure to verify the existence of the communi- 
cation path for transmission of alarm data. 

14. A method according to Claim 12 further comprising 
the steps of 

(a) refraining, under selected first conditions, 
from transmitting alarm values of sakj first data 
from the computational task to the keypad an- 
nunciator graphical user interface 

(b) upon a change in an alarm value of the first 
data, transmitting the changed alarm value 
from the computational task to the keypad an- 
nunciator graphical user interface to update the 
second presentation data, and 

wherein said first conditions exclude the con- 
ditions of step (b) and exclude the condition of trans- 
mitting current first alarm data of the process control 
system to the keypad annunciator graphical user in- 
terface, using the re-established communication 
path, in response to the re-establishment of the 
communk^ation path. 
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